Skip to content
#

security-hardening

Star

Here are 257 public repositories matching this topic...

Language: All
Filter by language
All 257 Shell 39 Python 37 PHP 16 JavaScript 14 HTML 12 C 11 Jinja 10 PowerShell 9 Go 8 C++ 5
Sort: Best match
Sort options
Best match Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

CISOfy / lynis

Star

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

linux shell auditing devops unix security-audit pci-dss compliance hardening security-vulnerability security-hardening devops-tools hipaa vulnerability-detection vulnerability-scanners security-scanner vulnerability-assessment gdpr security-tools system-hardening
  • Updated Sep 26, 2021
  • Shell

future-architect / vuls

Star

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

go linux golang freebsd security security-audit administrator cybersecurity security-vulnerability vulnerabilities security-hardening vulnerability-detection vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment vuls security-automation security-tools vulnerability-scanner
  • Updated Oct 6, 2021
  • Go

toniblyx / prowler

Star

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls and many more additional checks that help on GDPR, HIPAA and other security frameworks.

aws security cis security-audit cloud aws-cli assessment forensics compliance hardening security-hardening hipaa cloudtrail gdpr security-tools devsecops cis-benchmark aws-auditing prowler well-architected
  • Updated Oct 6, 2021
  • Shell

ComplianceAsCode / content

Star
Find more good first issues

jvoisin / snuffleupagus

Star
Open

Add a `notowner_exec` statement to prevent the execution of owned PHP files

1
WhiteWinterWolf
WhiteWinterWolf commented May 1, 2021

I'm not confident in the security brought by the readonly_exec statement.

In the classical *nix DAC model, it is expected for unprivileged users to be able to change the write permission flag on files they own. Therefore, Snuffleupagus readonly_exec statement only relies on the hope that an attacker won't find a way to rely on this standard mechanism to prevent the execution of arbitrary

Read more
enhancement question good first issue feature
Find more good first issues
ElectricEye

jonrau1 / ElectricEye

Star
Open

[PFR] Output findings to MongoDB/DocumentDB

jonrau1
jonrau1 commented Sep 23, 2021

Story
As a user of ElectricEye, I want to output my findings to MongoDB (or Amazon DocumentDb) so that I can interact or process findings within my preferred database technology.

Definition of Done

  • Test with Amazon DocDB (and maybe a MongoDB Container?)
  • New Output plugin is fully functional
  • Support for TLS Authentication / Username+Password into MongoDB
  • Update CFN & TF vari
Read more
documentation enhancement good first issue

Improve this page

Add a description, image, and links to the security-hardening topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the security-hardening topic, visit your repo's landing page and select "manage topics."

Learn more